https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-25022.htmlhttps://patchthecve.com/cve/CVE-2025-25022.htmlWed, 17 Jun 2026 09:00:09 +0000CRITICAL 9.6: IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could allow an unauthenticated user in the environment to obtain highly sensitive information in configuration files.https://patchthecve.com/cve/CVE-2025-25021.htmlhttps://patchthecve.com/cve/CVE-2025-25021.htmlWed, 17 Jun 2026 09:00:09 +0000HIGH 7.2: IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could allow a privileged execute code in case management script creation due to the improper generation of code.https://patchthecve.com/cve/CVE-2025-25020.htmlhttps://patchthecve.com/cve/CVE-2025-25020.htmlWed, 17 Jun 2026 09:00:08 +0000MEDIUM 6.5: IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could allow an authenticated user to cause a denial of service due to improperly validating API data input.https://patchthecve.com/cve/CVE-2025-25019.htmlhttps://patchthecve.com/cve/CVE-2025-25019.htmlWed, 17 Jun 2026 09:00:08 +0000MEDIUM 4.8: IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 does not invalidate session after a logout which could allow a user to impersonate another user on the system.https://patchthecve.com/cve/CVE-2025-1334.htmlhttps://patchthecve.com/cve/CVE-2025-1334.htmlWed, 17 Jun 2026 08:38:56 +0000MEDIUM 4.0: IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 allows web pages to be stored locally which can be read by another user on the system.https://patchthecve.com/cve/CVE-2023-47728.htmlhttps://patchthecve.com/cve/CVE-2023-47728.htmlWed, 17 Jun 2026 06:33:11 +0000MEDIUM 6.5: IBM QRadar Suite Software 1.10.12.0 through 1.10.22.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the request. This information could be used in further attacks againsthttps://patchthecve.com/cve/CVE-2024-25024.htmlhttps://patchthecve.com/cve/CVE-2024-25024.htmlWed, 17 Jun 2026 07:15:23 +0000MEDIUM 5.5: IBM QRadar Suite Software 1.10.12.0 through 1.10.23.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 281430.https://patchthecve.com/cve/CVE-2024-28799.htmlhttps://patchthecve.com/cve/CVE-2024-28799.htmlWed, 17 Jun 2026 07:21:48 +0000MEDIUM 5.6: IBM QRadar Suite Software 1.10.12.0 through 1.10.23.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 displays sensitive data improperly to a local privileged user, in non default configurations, during back-end commands which may result in the unexpected disclosure of this information. Ihttps://patchthecve.com/cve/CVE-2022-38382.htmlhttps://patchthecve.com/cve/CVE-2022-38382.htmlWed, 17 Jun 2026 04:56:30 +0000MEDIUM 4.7: IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1.10.23.0 does not invalidate session after logout which could allow another authenticated user to obtain sensitive information. IBM X-Force ID: 233672.https://patchthecve.com/cve/CVE-2024-25023.htmlhttps://patchthecve.com/cve/CVE-2024-25023.htmlWed, 17 Jun 2026 07:15:23 +0000MEDIUM 5.5: IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1.10.22.0 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 281429.https://patchthecve.com/cve/CVE-2022-38383.htmlhttps://patchthecve.com/cve/CVE-2022-38383.htmlWed, 17 Jun 2026 04:56:30 +0000MEDIUM 4.0: IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Software Suite 1.10.12.0 through 1.10.21.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 233673.https://patchthecve.com/cve/CVE-2023-47726.htmlhttps://patchthecve.com/cve/CVE-2023-47726.htmlWed, 17 Jun 2026 06:33:11 +0000HIGH 7.1: IBM QRadar Suite Software 1.10.12.0 through 1.10.21.0 and IBM Cloud Pak for Security 1.10.12.0 through 1.10.21.0 could allow an authenticated user to execute certain arbitrary commands due to improper input validation. IBM X-Force ID: 272087.https://patchthecve.com/cve/CVE-2023-47727.htmlhttps://patchthecve.com/cve/CVE-2023-47727.htmlWed, 17 Jun 2026 06:33:11 +0000MEDIUM 4.3: IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1.10.20.0 could allow an authenticated user to modify dashboard parameters due to improper input validation. IBM X-Force ID: 272089.https://patchthecve.com/cve/CVE-2022-38386.htmlhttps://patchthecve.com/cve/CVE-2022-38386.htmlWed, 17 Jun 2026 04:56:30 +0000MEDIUM 5.9: IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite for Software 1.10.12.0 through 1.10.19.0 does not set the SameSite attribute for sensitive cookies which could allow an attacker to obtain sensitive information using man-in-the-middle techniques. IBM X-Force ID: 233https://patchthecve.com/cve/CVE-2023-47731.htmlhttps://patchthecve.com/cve/CVE-2023-47731.htmlWed, 17 Jun 2026 06:33:12 +0000MEDIUM 5.4: IBM QRadar Suite Software 1.10.12.0 through 1.10.19.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading https://patchthecve.com/cve/CVE-2024-28782.htmlhttps://patchthecve.com/cve/CVE-2024-28782.htmlWed, 17 Jun 2026 07:21:47 +0000MEDIUM 6.3: IBM QRadar Suite Software 1.10.12.0 through 1.10.18.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 stores user credentials in plain clear text which can be read by an authenticated user. IBM X-Force ID: 285698.